Live data from Hacker News

Some Android apps are using ultrasonic beacons to track users

bleepingcomputer.com

71–80 of 93 posts

Re: Some Android apps are using ultrasonic beacons to track users

#71

062115 - How to Manage Android App Permissions to Protect Your Privacy http://thehackernews.com/2015/06/android-permission-manager.... beacon-blocking Chrome extension and sample Android (research prototype) patch: http://ubeacsec.org/#Downloads Silverdog Chrome Extension http://www.thewindowsclub.com/silverdog-chrome-extension-mit... Disable Beacon monitoring on a condition in Application http://stackoverflow.com/qu…

You have posted a number of links, but what's your opinion on the topic?

Given the link-dump, I'm assuming it's "Technologically savvy people can solve this for themselves, and that's sufficient."

Can you clarify?

Re: Some Android apps are using ultrasonic beacons to track users

#72

> The only good news found in this research was that after searching TV streams from seven different countries, researchers failed to discover any ultrasonic beacons Would that even work? I'm pretty sure modern digital TV audio compression totally removes sound that is vaguely close to 'ultrasound'. I guess maybe smart TV apps could add the signal though, but why would they when they already know what you are watchin…

They'd do it to connect profiles between the TV (which knows what you're watching) and any mobile devices within ultrasound reach (i.e. line of sight) of the TV. Do this a few times and it quickly becomes clear which phone is usually within range of the TV, and with that the profiles can be merged, giving a broader view of the user behind these devices. The solution is simple: don't get a 'smart' television. Better s…

Hell, I'd be happy if I could buy a dumb stove.

After a recent experience: that's simply not possible. Every damned kitchen stove on the market has electronics in it (failure-on-delivery of which in multiple instances spurred on the search), and increasingly: Bluetooth or Wifi capabilities.

Ironically, one thing the new stove improves on over its predecessor is that there's far less electronics hum coming from it. Though several appliances still emite some high-pitched, and ultrasonic (I'm sensitive to that) noise.

Re: Some Android apps are using ultrasonic beacons to track users

#73

Does anyone have the link to the actual list? Neither the article nor the original paper seem to list the tracking apps, they just mention McDonald’s and Krispy Kreme.

Here's the top apps using silverpush: http://mixrank.com/playstore/namespaces/com.silverpush.sdk.a... Lisnr: http://mixrank.com/playstore/namespaces/com.lisnr.sdk/instal... And shopkick doesn't appear to be for Android. If someone has a link to the docs I can double check.

I just saw an ad for Shopkick yesterday on my Android. And this site says it's in Android.

http://app.shopkick.com/wr2/6Z48W52-6Z6LIDX

Unless it's something else with the same name.

Re: Some Android apps are using ultrasonic beacons to track users

#74

Earlier quoted context omitted.

They'd do it to connect profiles between the TV (which knows what you're watching) and any mobile devices within ultrasound reach (i.e. line of sight) of the TV. Do this a few times and it quickly becomes clear which phone is usually within range of the TV, and with that the profiles can be merged, giving a broader view of the user behind these devices. The solution is simple: don't get a 'smart' television. Better s…

I'm with you on not getting a 'smart' TV, but this comment reeks of elitism: "Better still is to forego on television altogether but if you insist on having canned 'entertainment' (panem et circensis) beamed into your domicile" What if I want to play games, watch movies, or just sit down and otherwise enjoy myself? Is everything that comes on a screen an unnecessary diversion or is it just a screen of a certain size?

Your games and movies can be ultrasound beacons too..a board game cannot.

Re: Some Android apps are using ultrasonic beacons to track users

#75
post #9

It is these kind of "behind your back" shenanigans that will quickly force governments to move to regulating the industry, giving rise to a whinging chorus of "leave us alone" from the industry. An industry that has shown itself to be utterly untrustworthy, sneaky and aggressively invasive. I see a need for a good, simple, slick and solid interface that allows you to select what functions an app can and cannot do on…

> these kind of "behind your back" shenanigans that will quickly force governments to move to regulating the industry These kinds of things have been going on for years, and yet the U.S. government, for one, just reduced privacy protections for consumers.

These kinds of things have been going on for years, and yet the U.S. government, for one, just reduced privacy protections for consumers.

True. I have higher hopes for the EU

Re: Some Android apps are using ultrasonic beacons to track users

#76
post #66

062115 - How to Manage Android App Permissions to Protect Your Privacy http://thehackernews.com/2015/06/android-permission-manager.... beacon-blocking Chrome extension and sample Android (research prototype) patch: http://ubeacsec.org/#Downloads Silverdog Chrome Extension http://www.thewindowsclub.com/silverdog-chrome-extension-mit... Disable Beacon monitoring on a condition in Application http://stackoverflow.com/qu…

Don't think permissions don't really protect you from this. AFAIK you don't need permission to _play_ sounds at least for foreground apps. So that means in a public space, it doesn't matter if your mic is disabled - if anyone _else_ gave permission for an app to use the mic, their phone hear your phone transmitting ultrasound, allowing you to be tracked.

PS that first sentence was supposed to read...

"Don't think permissions really protect you from this."

Re: Some Android apps are using ultrasonic beacons to track users

#77

062115 - How to Manage Android App Permissions to Protect Your Privacy http://thehackernews.com/2015/06/android-permission-manager.... beacon-blocking Chrome extension and sample Android (research prototype) patch: http://ubeacsec.org/#Downloads Silverdog Chrome Extension http://www.thewindowsclub.com/silverdog-chrome-extension-mit... Disable Beacon monitoring on a condition in Application http://stackoverflow.com/qu…

You have posted a number of links, but what's your opinion on the topic? Given the link-dump, I'm assuming it's "Technologically savvy people can solve this for themselves, and that's sufficient." Can you clarify?

I think a large part of Hacker News' culture is finding facts more interesting than opinions. We call this MYOO (Make Your Own Opinion), a branch of the DIY movement.

Re: Some Android apps are using ultrasonic beacons to track users

#78
it's interesting research, but there is no list of apps provided, only thing I could find it PDF of research is this:

100000+ SMS Messages Moziberg 2.4 1,000,000 – 5,000,000 McDo Philippines Golden Arches Dev. Corp. 1.4.27 100,000 – 500,000 Krispy Kreme Philippines Mobext 1.9 100,000 – 500,000 Pinoy Henyo Jayson Tamayo 4.0 1,000,000 – 5,000,000 Civil Service Reviewer Free Jayson Tamayo 1.1 50,000 – 100,000

so from those 5 with significant install base are minimum 3 targeted at Philippines market, the other two probably too, though they mention India

also note: Within the 1,320,822 Android applications, our scan yields 2 and 1 samples with functionalities of Lisnr and Shopkick, respectively. These samples are either applications that have been released by these companies themselves or by other companies officially collaborating with Shopkick or Lisnr. The user is thus aware of the deployed technology and needs to start the audio analysis manually.

so conclusion is, from 1.3mil tested apps, around 230 have this functionality, around 5 have significant user base and all of these are in third world countries (PH/IN). also according research many devices have issues detect these higher frequencies and they didn't find it working in TV streams or European shops. also from those 230 in most of them they use technology of Shopkick and Lisnr where you need MANUALLY start audio analysis. it's interesting research, but let's keep it in perspective

TLDR: don't give microphone permission to apps which have no use of microphone

Re: Some Android apps are using ultrasonic beacons to track users

#79
post #77

Earlier quoted context omitted.

You have posted a number of links, but what's your opinion on the topic? Given the link-dump, I'm assuming it's "Technologically savvy people can solve this for themselves, and that's sufficient." Can you clarify?

I think a large part of Hacker News' culture is finding facts more interesting than opinions. We call this MYOO (Make Your Own Opinion), a branch of the DIY movement.

The problem with the "We report, you decide." model is that the reporter chooses what to report.

The messenger and the message always have a relationship. It may be irrelevant, but it always exists.

Re: Some Android apps are using ultrasonic beacons to track users

#80
Google Play also pairs with set-top box devices like Roku using an audio mechanism, although I'm not sure if it's ultrasound. A series of audible clicks are present while pairing, so I'm assuming it may be a different audio or environmental-based encoding, maybe even just location -> audio correlation rather than data modulated over any kind of over-the-air carrier. Does anyone know more about how that particular setup works? It sounds similar to the Shopkick app in a lot of ways.
Post reply on HN